


* 

Application No. 09/588,547 

Amendments to the Specification 

Page / ^3^1ines 7-14, please replace the existing paragraph with the following amended 
paragraph: 

The challenge input unit 9 is supplied with challenge c, which is query information for 
authentication. The response generation unit 10 generates response r from the challenge c 
inputted to the challenge input unit 9 and the hash value X(M) generated by the hash value 
calculation unit 65. The response output unit 1 1 outputs the response r generated by the 
response generation unit 10. 

Page 23, lines 18-27, pleaSereplace the existing paragraph with the following 
amended paragraph: 

It is assumed that the finite group G is difficult with discrete logarithm problems in 
the example of Diffie-Hellman key sharing, and is difficult with annihilators decision 
problems in the example of RSA. The hash value X(M) generated by the hash value 
calculation unit 6-5_is an element of p element field F p in the example of Diffie-Hellman key 
sharing, and an element of the finite ring A in the example of RSA. The challenge c inputted 
to the challenge input unit 9 is an element of the finite group G. 



Page 24, lines 20-26, pjj&argereplace the existing paragraph with the following 
amended paragraph: 



The random number generation unit 12 generates a random number k. The response 
^ generation unit 10 generates response r from the random number k generated by the random 
number generation unit 12, the challenge c inputted to the challenge input unit 9, and the hash 
value X(M) generated by the hash value calculation unit 65. 



Page 25, lines 10-18, pleas^-rgplace the existing paragraph with the following 
amended paragraph: 
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The hash value X(M) generated by the hash value calculation unit &-5_wA the random 
number k generated by the random number generation unit 12 are elements of the p-elements 
field F p in examples of DSA signature, variants of ElGamal signature, Nyberg-Rueppel 
signature, and Schnorr signature, and are elements of the finite group G in examples of 
message recovery type Guillou-Quisquater signature, and Guillou-Quisquater signature. 

Page 28, line 18 to page 29, linej^ptease' replace the existing paragraph with the 
following amended paragraph: 



The random number generation unit 12 generates the random number k. The 
commitment generation unit 1 3 generates a commitment w from the random number k 
generated by the random number generation unit 12. The commitment output unit 14 outputs 
the commitment w generated by the commitment generation unit 13. The response generation 
unit 10 generates the response r from the random number k generated by the random number 
generation unit 12, the challenge c inputted to the challenge input unit 9, and the hash value 
X(M) generated by the hash value calculation unit 65 . 



Page 29, lines 17-23, pjj©agereplace the existing paragraph with the following 
amended paragraph: 



The hash value X(M) generated by the hash value calculation unit 6-5_and the random 
number k generated by the random number generation unit 12 are elements of the p-elements 
field F p in an example of Schnorr authentication, and are elements of the finite group G in 
examples of Guillou-Quisquater authentication and Fiat-Shamir authentication. 

Page 32, lines 9-15, ple^se^placTthe existing paragraph with the following amended 
paragraph: 



The response generation unit 10 generates the response r from the random number k 
generated by the random number generation unit 12, the commitment generated by the 
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commitment w generation unit 13, the challenge c inputted to the challenge input unit 9, and 
the hash value X(M) generated by the hash value calculation unit 65 . 

Page 32, lines 19-24, pleascy^pfeeethe existing paragraph with the following 
amended paragraph: 

It is assumed that the finite group G is difficult with discrete logarithm problems. The 
hash value X(M) generated by the hash value calculation unit 65, the random number k 
generated by the random number generation unit 12, and the challenge c inputted to the 
challenge input unit 9 are elements of the p element field F p , 

Page 59, lines ^4r27pleasTreplace the existing paragraph with the following amended 
paragraph: 

The right recipient (user) 35 holds the proving instrument (the second or fifth 
embodiment) 36-Thaving the private hash function H issued in association with the unique 
value d by the proving instrument issuing device (the sixth embodiment). 
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